diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
index 57b39f30..5b1bf930 100644
--- a/.github/workflows/security.yml
+++ b/.github/workflows/security.yml
@@ -19,7 +19,7 @@ jobs:
         uses: actions/checkout@v4
 
       - name: Run Trivy vulnerability scanner in repo mode
-        uses: aquasecurity/trivy-action@0.12.0
+        uses: aquasecurity/trivy-action@0.13.1
         if: ${{ ! github.event.schedule }} # Do not run inline checks when running periodically
         with:
           scan-type: fs
@@ -29,7 +29,7 @@ jobs:
           skip-dirs: 'build'
 
       - name: Run Trivy vulnerability scanner sarif output
-        uses: aquasecurity/trivy-action@0.12.0
+        uses: aquasecurity/trivy-action@0.13.1
         if: ${{ github.event.schedule }} # Generate sarif when running periodically
         with:
           scan-type: fs